diff --git a/.gitattributes b/.gitattributes
index 5d79390a2..fa2751233 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,10 @@
+# Font-build test fixtures are compared byte for byte: a checkout must not convert them.
+crates/fonts-build/tests/fixture/** -text
+
+# The pinned font index is hashed and compiled in as committed: a checkout must not convert its
+# line endings, or `Index::bundled` fails its checksum on Windows.
+crates/font-store/index/sources.json -text
+crates/font-store/index/indexes/*.gz binary
+
 # Copies of the vendored krilla source diff, one per patch (see vendor/krilla/README.craft.md).
 vendor/krilla/patches/*.patch linguist-generated=true
diff --git a/.github/workflows/workspace.yml b/.github/workflows/workspace.yml
index 4002900d9..1f66236e2 100644
--- a/.github/workflows/workspace.yml
+++ b/.github/workflows/workspace.yml
@@ -12,64 +12,66 @@ permissions:
 
 jobs:
   native:
-    name: Workspace (${{ matrix.os }})
-    timeout-minutes: 30
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
-    runs-on: ${{ matrix.os }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install software Vulkan renderer
-        if: runner.os == 'Linux'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y mesa-vulkan-drivers libvulkan1
-          echo 'WGPU_BACKEND=vulkan' >> "$GITHUB_ENV"
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
-        with:
-          key: workspace
-      - name: Prepare the Windows test driver
-        if: runner.os == 'Windows'
-        shell: powershell
-        run: |
-          $ErrorActionPreference = 'Stop'
-          Start-Service Spooler
-          Add-PrinterDriver -Name 'Generic / Text Only'
-      - run: cargo fmt --check
-      - run: cargo clippy --workspace --all-targets --locked -- -D warnings
-      - run: cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
-      - run: cargo test --workspace --locked
-        env:
-          CRAFT_PRINT_REQUIRE_QUEUE: ${{ runner.os == 'Windows' && '1' || '0' }}
-      - run: cargo test --workspace --all-features --locked
-        env:
-          CRAFT_PRINT_REQUIRE_QUEUE: ${{ runner.os == 'Windows' && '1' || '0' }}
+    name: Workspace
+    uses: storytold/craft-common-actions/.github/workflows/gate.yml@main
+    with:
+      os: '["ubuntu-latest","windows-latest","macos-latest"]'
+      timeout-minutes: 60
+      tools: ""
+      packages: mesa-vulkan-drivers libvulkan1
+      craft-fonts-ref: b076417b5880bd4154bd22f00695b1d28c6bea83
+      linux-env: WGPU_BACKEND=vulkan
+      windows-env: CRAFT_PRINT_REQUIRE_QUEUE=1
+      env: CRAFT_PRINT_REQUIRE_QUEUE=0
+      setup-command: |
+        set -euo pipefail
+        corpus_fetcher=.test-inputs/photocraft
+        mkdir -p "$corpus_fetcher"
+        git -C "$corpus_fetcher" init
+        git -C "$corpus_fetcher" remote add origin https://github.com/storytold/PhotoCraft.git
+        git -C "$corpus_fetcher" fetch --quiet --depth=1 origin 74330157cb601573ae4523a95bb9132822fc3918
+        git -C "$corpus_fetcher" checkout --quiet --detach FETCH_HEAD
+        (cd "$corpus_fetcher" && cargo xtask corpus --psd --psd-tools --atn)
+        python scripts/test-fetch-pdf-test-fonts.py
+        python scripts/fetch-pdf-test-fonts.py "$RUNNER_TEMP/craft-pdf-test-fonts"
+        printf 'CRAFT_PSD_CORPUS=%s\n' "$GITHUB_WORKSPACE/$corpus_fetcher/corpus" >> "$GITHUB_ENV"
+        printf 'CRAFT_PDF_TEST_FONT_DIR=%s\n' "$RUNNER_TEMP/craft-pdf-test-fonts" >> "$GITHUB_ENV"
+      command: |
+        cargo fmt --check
+        cargo clippy --workspace --all-targets --locked -- -D warnings
+        cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
+        cargo test --workspace --locked
+        cargo test --workspace --all-features --locked
+      windows-command: |
+        powershell.exe -NoProfile -Command '$ErrorActionPreference = "Stop"; Start-Service Spooler; Add-PrinterDriver -Name "Generic / Text Only"'
+        cargo fmt --check
+        cargo clippy --workspace --all-targets --locked -- -D warnings
+        cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
+        cargo test --workspace --locked
+        cargo test --workspace --all-features --locked
+
   msrv:
-    name: Rust 1.95 (Linux libraries)
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@1.95.0
-      - uses: Swatinem/rust-cache@v2
-        with:
-          key: workspace-msrv
-      - run: cargo check --workspace --lib --all-features --locked
+    name: Rust 1.95
+    uses: storytold/craft-common-actions/.github/workflows/gate.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      toolchain: 1.95.0
+      targets: ""
+      tools: ""
+      craft-fonts-ref: ""
+      require-craft-fonts: false
+      timeout-minutes: 15
+      dev-debug: ""
+      command: cargo check --workspace --lib --all-features --locked
+
   wasm:
     name: UI and settings WASM
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-unknown-unknown
-      - uses: Swatinem/rust-cache@v2
-        with:
-          key: workspace-wasm
-      - run: cargo check -p craft-ui -p craft-settings --all-features --locked --target wasm32-unknown-unknown
+    uses: storytold/craft-common-actions/.github/workflows/gate.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      targets: wasm32-unknown-unknown
+      tools: ""
+      craft-fonts-ref: ""
+      require-craft-fonts: false
+      timeout-minutes: 15
+      command: cargo check -p craft-ui -p craft-settings --all-features --locked --target wasm32-unknown-unknown